NIST SP 800-171 Cybersecurity Compliance Support

The contract requires comprehensive support for assessing, implementing, and reporting on cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement requirements. The work involves evaluating existing systems and processes, identifying gaps in compliance, deploying necessary technical and administrative safeguards, and producing formal documentation to demonstrate adherence to federal security standards. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, under a subcontract arrangement, with all activities focused on ensuring the confidentiality, integrity, and availability of CUI within the DoD supply chain. The solicitation, issued under NAICS code 541612 for Management Consulting Services, was posted on May 8, 2026, with responses due by May 13, 2026. The contracting activity falls under the Fluid Handling Division of the Department of Defense, emphasizing the critical nature of securing sensitive information related to defense-related fluid systems and components. Compliance with NIST SP 800-171 is mandatory, requiring full implementation of the 110 security controls across families such as access control, awareness and training, media protection, and incident response, with verifiable evidence submitted to meet audit readiness. The subcontractor must possess demonstrated experience in federal cybersecurity compliance and the ability to deliver accurate, timely reporting under strict deadlines.